Details

Ad tracking and targeted ads _MUST_ be disabled.

The information system _MUST_ be configured to provide only essential capabilities. Disabling ad tracking ensures that applications and advertisers are unable to track users’ interests and deliver targeted advertisements.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.AdLib:
forceLimitAdTracking:
True

Supportive Information

The following resource is also helpful.

• https://github.com/usnistgov/macos_security

This security hardening control applies to the following category of controls within NIST 800-53: Access Control, Configuration Management, System and Communications Protection.This control applies to the following type of system Unix.

References

• 800-53|AC-20
• 800-53|CM-7
• 800-53|CM-7(1)
• 800-53|SC-7(10)
• CCE|CCE-84822-6

Source

• Tenable.com/audits